Skip to content

chore(deps): bump gix-fs from 0.21.0 to 0.21.1#3276

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/gix-fs-0.21.1
Open

chore(deps): bump gix-fs from 0.21.0 to 0.21.1#3276
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/gix-fs-0.21.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps gix-fs from 0.21.0 to 0.21.1.

Release notes

Sourced from gix-fs's releases.

gix-fs v0.21.1

A security fix for GHSA-f89h-2fjh-2r9q, which could allow attackers to trick gix clone into writing outside of the repository.

Commit Statistics

  • 3 commits contributed to the release over the course of 2 calendar days.
  • 2 days passed between releases.
  • 0 commits were understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Commit Details

  • Uncategorized
    • Update changelog of gix-fs prior to release (e26d378)
    • Revalidate cached stack leaves before directory reuse (93d0ff6)
    • Merge pull request #2546 from GitoxideLabs/fix-2545 (adb8328)
Changelog

Sourced from gix-fs's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.53.0 (2026-04-28)

0.52.1 (2026-04-24)

New Features

  • add gix free trust to easily check the assigned trust level of any given path This is particularly useful on Windows, which makes it easy to probe existing paths with ownership that might be complex to reproduce otherwise.

Commit Statistics

  • 6 commits contributed to the release over the course of 27 calendar days.
  • 32 days passed between releases.
  • 1 commit was understood as conventional.
  • 0 issues like '(#ID)' were seen in commit messages

Thanks Clippy

Clippy helped 1 time to make code idiomatic.

Commit Details

  • Uncategorized
    • Merge pull request #2510 from GitoxideLabs/folder-identity-on-windows (a96587c)
    • Add gix free trust to easily check the assigned trust level of any given path (ab2016f)
    • Merge pull request #2513 from GitoxideLabs/v2-diff (2a5db88)
    • Thanks clippy (e4f380e)
    • Merge pull request #2494 from GitoxideLabs/improvements (50fb46f)
    • Adapt to changes in gix-config. (344218a)

0.52.0 (2026-03-22)

0.51.0 (2026-02-22)

... (truncated)

Commits
  • d3e4c17 Release gix-fs v0.21.1
  • e26d378 update changelog of gix-fs prior to release
  • 1d9bae2 address auto-review
  • 2facc6f Add a plan that consolidates all performance TODOs
  • f3cc6b9 document vulnerability of State::from_tree()
  • 05f36c4 Add `State::from_tree()`` benchmark coverage
  • 93d0ff6 Revalidate cached stack leaves before directory reuse
  • c2ae6cd Add clone reproducer for symlink prefix reuse checkout escape
  • 23af41a Merge pull request #2543 from cruessler/run-gix-worktree-stream-tests-with-sh...
  • b358d31 address auto-review
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the type: chore Routine tasks like conversions, reorganization, and maintenance work. label May 7, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/gix-fs-0.21.1 branch 3 times, most recently from ee7f0aa to 1a27c16 Compare May 7, 2026 06:25
Bumps [gix-fs](https://github.com/GitoxideLabs/gitoxide) from 0.21.0 to 0.21.1.
- [Release notes](https://github.com/GitoxideLabs/gitoxide/releases)
- [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md)
- [Commits](GitoxideLabs/gitoxide@gix-fs-v0.21.0...gix-fs-v0.21.1)

---
updated-dependencies:
- dependency-name: gix-fs
  dependency-version: 0.21.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/gix-fs-0.21.1 branch from 1a27c16 to 48da865 Compare May 7, 2026 07:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: chore Routine tasks like conversions, reorganization, and maintenance work.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants